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PENDING CLAIMS AS AMENDED 

Please amend the claims as follows: 

1-63. (Cancelled) 

64. (New) A method for broadcasting encrypted multimedia content from a content 
provider to a plurality of authorized terminals over the air, comprising: 

each terminal forwarding a unique public key over the air to the content provider, 
wherein each terminal has a mobile equipment and has a secure processing unit that securely 
stores a unique private key, corresponding to the unique public key, that is not accessible to a 
terminal user, and wherein the content provider encrypts a broadcast access key with each of the 
unique public keys to authorize a terminal having the secure processing unit securely storing a 
corresponding unique private key to receive the encrypted multimedia content; 

each terminal receiving the respective encrypted broadcast access key over the air from 
the content provider and providing the respective encrypted broadcast access key to the 
terminal's secure processing unit, wherein the terminal's secure processing unit decrypts the 
encrypted broadcast access key using the secure processing unit's unique private key and 
securely stores the broadcast access key; 

each terminal receiving short-term key information and encrypted multimedia content 
broadcast over the air from the content provider to the plurality of terminals, wherein the 
multimedia content is encrypted with a short-term key, and wherein the short-term key is 
generated using the broadcast access key and the short-term key information; 

each terminal providing the short-term key information to the terminal's secure 
processing unit, wherein the terminal's secure processing unit generates the short-term key using 
the broadcast access key and the short-term key information, and provides the short-term key to 
the terminal's mobile equipment; and 

each terminal's mobile equipment decrypting the multimedia content using the short-term 

key. 
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65. (New) A method for broadcasting encrypted multimedia content as defined in claim 

64, wherein the short-term key is accessible to a user. 

66. (New) A method for broadcasting encrypted multimedia content as defined in claim 

65, wherein the short-term key is changed by the content provider at a rate such that the cost of 
an unauthorized terminal user obtaining the short-term key from the mobile equipment exceeds 
the value of the short-term key to the unauthorized terminal user. 

67. (New) A method for broadcasting encrypted multimedia content as defined in claim 
64, wherein the secure processing unit is removable from the terminal. 

68. (New) A method for broadcasting encrypted multimedia content as defined in claim 
64, wherein the short-term key information is the short-term key encrypted using the broadcast 
access key. 

69. (New) A method for broadcasting encrypted multimedia content as defined in claim 
64, wherein the short-term key is generated by applying a cryptographic hash to a concatenation 
of the short-term key information and the broadcast access key. 

70. (New) A method for broadcasting encrypted multimedia content as defined in claim 
69, wherein the short-term information is a random value. 

71 . (New) A method for broadcasting encrypted multimedia content as defined in claim 
64, wherein at least one terminal comprises a mobile station. 
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72. (New) An integrated circuit for a mobile station, comprising: 

means for forwarding a unique public key over the air to the content provider; 

means for securely storing a unique private key, corresponding to the unique public key, 
that is not accessible to a user, and wherein the content provider encrypts a broadcast access key 
with the unique public key to authorize an integrated circuit securely storing a corresponding 
unique private key to receive the encrypted multimedia content; 

means for receiving the respective encrypted broadcast access key over the air from the 
content provider; 

means for decrypting the encrypted broadcast access key and securely storing the 
broadcast access key, wherein the securely stored broadcast access key is not accessible to a 
user; 

means for receiving short-term key information and encrypted multimedia content 
broadcast over the air from the content provider to a plurality of mobile stations each having the 
integrated circuit, wherein the multimedia content is encrypted with a short-term key, and 
wherein the short-term key is generated using the broadcast access key and the short-term key 
information; 

means for generating the short-term key using the securely stored broadcast access key 
and the broadcast short-term key information; and 

means for decrypting the multimedia content using the short-term key. 

73. (New) An integrated circuit as defined in claim 72, wherein the short-term key is 
accessible to a user. 

74. (New) An integrated circuit as defined in claim 72, wherein the short-term key 
information is the short-term key encrypted using the broadcast access key. 

75. (New) An integrated circuit as defined in claim 72, wherein the short-term key is 
generated by applying a cryptographic hash to a concatenation of the short-term key information 
and the broadcast access key. 
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76. (New) An integrated circuit as defined in claim 75, wherein the short-term 
information is a random value. 

77. (New) A machine readable medium, comprising: 

code for forwarding a unique public key over the air to the content provider; 

code for securely storing a unique private key, corresponding to the unique public key, 
that is not accessible to a user, and wherein the content provider encrypts a broadcast access key 
with the unique public key to authorize a terminal securely storing a corresponding unique 
private key to receive the encrypted multimedia content; 

code for receiving the respective encrypted broadcast access key over the air from the 
content provider; 

code for decrypting the encrypted broadcast access key and securely storing the broadcast 
access key, wherein the securely stored broadcast access key is not accessible to a user; 

code for receiving short-term key information and encrypted multimedia content 
broadcast over the air from the content provider to a plurality of terminals each having the 
integrated circuit, wherein the multimedia content is encrypted with a short-term key, and 
wherein the short-term key is generated using the broadcast access key and the short-term key 
information; 

code for generating the short-term key using the securely stored broadcast access key and 
the broadcast short-term key information; and 

code for decrypting the multimedia content using the short-term key. 

78. (New) A machine readable medium as defined in claim 77, wherein the short-term 
key is accessible to a user. 

79. (New) A machine readable medium as defined in claim 77, wherein the short-term 
key information is the short-term key encrypted using the broadcast access key. 
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80. (New) A machine readable medium as defined in claim 77, wherein the short-term 
key is generated by applying a cryptographic hash to a concatenation of the short-term key 
information and the broadcast access key. 

81. (New) A machine readable medium as defined in claim 80, wherein the short-term 
information is a random value. 

82. (New) An apparatus for receiving encrypted multimedia content broadcast over the 
air from a content provider to a plurality of authorized apparatus, comprising: 

a mobile equipment configured to: 

forward a unique public key over the air to the content provider, and 

decrypt the multimedia content using the short-term key, wherein the 
multimedia content is encrypted with a short-term key, and wherein the short-term key 
is generated using a broadcast access key and short-term key information; and 
a secure processing unit configured to: 

securely store a unique private key, corresponding to the unique public key, 
that is not accessible to a user, wherein the content provider encrypts a broadcast 
access key with the unique public key to authorize a apparatus having the secure 
processing unit securely storing the corresponding unique private key to receive the 
encrypted multimedia content; 

receive the respective encrypted broadcast access key over the air from the 
content provider; 

decrypt the encrypted broadcast access key and securely store the broadcast 
access key, wherein the securely stored broadcast access key is not accessible to a 
user; 

receive the short-term key information broadcast over the air from the content 
provider to the plurality of apparatus; 

generating the short-term key using the securely stored broadcast access key 
and the broadcast short-term key information. 
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83. (New) An apparatus as defined in claim 82, wherein the short-term key is accessible 
to a user. 

84. (New) An apparatus as defined in claim 82, wherein the short-term key information 
is the short-term key encrypted using the broadcast access key. 

85. (New) An apparatus as defined in claim 82, wherein the short-term key is generated 
by applying a cryptographic hash to a concatenation of the short-term key information and the 
broadcast access key. 

86. (New) An appatus as defined in claim 85, wherein the short-term information is a 
random value. 
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